How to make protection from xss at the level of the entire application in spring MVC (3.x)?

Question

Java

Good afternoon!
I have a spring MVC application. I need to add protection against CSS attacks at the application level. How can I make sure that all incoming parameters from any requests are automatically escaped? The option when each request is separate, or escaping when outputting to jsp is not suitable, because there is a danger of forgetting any parameter.

Answer 1

In web.xml

<context-param>
    <param-name>defaultHtmlEscape</param-name>
    <param-value>true</param-value>
</context-param>